Re: Small Docker container builds the latest pil in Alpine image

2020-03-26 Thread Guido Stepken
Yes, you're right. Docker, from security point of view, is like a Swiss Cheese. I always succeeded to find a way to break out, getting *full access* to the underlying machine. Always! Webassembly is a bit different. We now have around 200 people working fulltime at building the "absolutely safe"

Re: Small Docker container builds the latest pil in Alpine image

2020-03-26 Thread David Bloom
SmartOS provides good multi-tenant isolation but it won't run on a Rock64 or Raspi. That said I do have a rock64, love it, and wish I had a need for something so that I could buy a clusterboard. A 28-core, 14GB RAM cluster on a mini-ITX board for ~275 euros could get some nice work done. Too

Re: Small Docker container builds the latest pil in Alpine image

2020-03-26 Thread David Bloom
On Thu, Mar 26, 2020 at 8:43 AM Guido Stepken wrote: > Though - for some folks - it might make things simpler, i am no friend of > Docker. > > What the Docker founder is saying about Docker now: > > Solomon Hykes > @solomonstre > > · > 27. März 2019 >

Re: Small Docker container builds the latest pil in Alpine image

2020-03-26 Thread andreas
Thanks for your informative email. I mostly agree with your points, except for WebAssembly on the client. Though you differentiate between WebASM on client and on server - didn't know about WebASM on server, might be a very good thing! But WebASM on the client is a epic conceptual mistake - it

Re: Small Docker container builds the latest pil in Alpine image

2020-03-26 Thread Guido Stepken
Though - for some folks - it might make things simpler, i am no friend of Docker. What the Docker founder is saying about Docker now: Solomon Hykes @solomonstre · 27. März 2019 If

Re: PicoLisp on windows

2020-03-26 Thread Guido Stepken
Sure. But tell me: What is faster? A tiny Picolisp interpreter binary, that entirely fits into 1st/2nd/3rd level cache, accesses memory without waitstaites - or a huge, multi gigabyte JIT engine, that, in itself, is a pure memory monster? My measurements show, that small, tiny interpreters -